A security vulnerability exists in the argo-workflows package related to webpack-dev-server versions up to and including 5. The vulnerability has a CVSS score of 6.5 and impacts confidentiality with no impact on integrity or availability. Fixed versions 4.1.6-r1 and 4.0.15-r2 are available.